Detecting Peripheral-based Attacks on the Host Memory

Detecting Peripheral-based Attacks on the Host Memory PDF Author: Patrick Stewin
Publisher: Springer
ISBN: 3319135155
Category : Technology & Engineering
Languages : en
Pages : 118

Get Book Here

Book Description
This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host’s main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process – an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host’s main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again.

Detecting Peripheral-based Attacks on the Host Memory

Detecting Peripheral-based Attacks on the Host Memory PDF Author: Patrick Stewin
Publisher: Springer
ISBN: 3319135155
Category : Technology & Engineering
Languages : en
Pages : 118

Get Book Here

Book Description
This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host’s main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process – an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host’s main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again.

Research in Attacks, Intrusions, and Defenses

Research in Attacks, Intrusions, and Defenses PDF Author: Salvatore J. Stolfo
Publisher: Springer
ISBN: 364241284X
Category : Computers
Languages : en
Pages : 485

Get Book Here

Book Description
This book constitutes the proceedings of the 16th International Symposium on Research in Attacks, Intrusions and Defenses, former Recent Advances in Intrusion Detection, RAID 2013, held in Rodney Bay, St. Lucia in October 2013. The volume contains 22 full papers that were carefully reviewed and selected from 95 submissions, as well as 10 poster papers selected from the 23 submissions. The papers address all current topics in computer security ranged from hardware-level security, server, web, mobile, and cloud-based security, malware analysis, and web and network privacy.

Trust and Trustworthy Computing

Trust and Trustworthy Computing PDF Author: Alessandro Acquisti
Publisher: Springer Science & Business Media
ISBN: 3642138683
Category : Business & Economics
Languages : en
Pages : 452

Get Book Here

Book Description
This book constitutes the refereed proceedings of the Third International Conference on Trust and Trustworthy Computing, TRUST 2010, held in Berlin, Germany, in June 2010. The 25 revised full papers and 6 short papers presented were carefully selected from numerous submissions. The papers are organized in a technical strand and a socio-economic strand and cover a broad range of concepts including trustworthy infrastructures, services, hardware, software, and protocols as well as social and economic aspects of the design, application, and usage of trusted computing.

Emerging Management Mechanisms for the Future Internet

Emerging Management Mechanisms for the Future Internet PDF Author: Guillaume Doyen
Publisher: Springer
ISBN: 3642389988
Category : Computers
Languages : en
Pages : 173

Get Book Here

Book Description
This book constitutes the refereed proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2013, held in Barcelona, Spain, in June 2013. The 11 full papers presented were carefully reviewed and selected from 32 submissions. The volume also includes 7 papers presented at the AIMS Ph.D. workshop. They were reviewed and selected from 14 submissions. The papers are organized in topical sections on traffic engineering and quality-of-service; monitoring and modeling; security management; content distribution and multimedia; autonomous management; and monitoring mechanisms.

Research in Attacks, Intrusions, and Defenses

Research in Attacks, Intrusions, and Defenses PDF Author: Fabian Monrose
Publisher: Springer
ISBN: 3319457195
Category : Computers
Languages : en
Pages : 487

Get Book Here

Book Description
This book constitutes the refereed proceedings oft he 19th International Symposium on Research in Attacks, Intrusions, and Defenses, RAID 2016, held in Evry, France, in September 2016. The 21 full papers presented were carefully reviewed and selected from 85 submissions. They are organized around the following topics: systems security; low-level attacks and defenses; measurement studies; malware analysis; network security; systematization of knowledge and experience reports; Web and mobile security.

Handbook of Information Security, Threats, Vulnerabilities, Prevention, Detection, and Management

Handbook of Information Security, Threats, Vulnerabilities, Prevention, Detection, and Management PDF Author: Hossein Bidgoli
Publisher: John Wiley & Sons
ISBN: 0470051213
Category : Business & Economics
Languages : en
Pages : 1154

Get Book Here

Book Description
The Handbook of Information Security is a definitive 3-volume handbook that offers coverage of both established and cutting-edge theories and developments on information and computer security. The text contains 180 articles from over 200 leading experts, providing the benchmark resource for information security, network security, information privacy, and information warfare.

21st Acm Symposium on Operating Systems Principles (Sosp '07).

21st Acm Symposium on Operating Systems Principles (Sosp '07). PDF Author:
Publisher:
ISBN: 9781605605685
Category :
Languages : en
Pages : 382

Get Book Here

Book Description


Cloud Security

Cloud Security PDF Author: Preeti Mishra
Publisher: CRC Press
ISBN: 1000528774
Category : Computers
Languages : en
Pages : 246

Get Book Here

Book Description
Cloud computing has gained paramount attention and most of the companies are adopting this new paradigm and gaining significant benefits. As number of applications and business operations are being facilitated by the cloud computing paradigm, it has become the potential target to attackers. The importance of well-organized architecture and security roles have become greater with the growing popularity. Cloud Security: Attacks, Techniques, Tools, and Challenges, provides an in-depth technical description about various key essential aspects of cloud security. We have endeavored to provide a technical foundation that will be practically useful not just for students and independent researchers but also for professional cloud security analysts for conducting security procedures, and all those who are curious in the field of cloud security The book offers comprehensive coverage of the most essential topics, including: Basic fundamentals of Cloud Computing Cloud security concepts, vulnerabilities, security standards and reference models Cloud security goals, key issues and privacy requirements Threat model, detailed taxonomy of cloud attacks, Attack feature analysis – case study A detailed taxonomy of IDS techniques and Cloud Intrusion Detection Systems (IDS) Attack and security tools, LibVMI – case study Advanced approaches: Virtual Machine Introspection (VMI) and Hypervisor Introspection (HVI) Container security: threat model, attacks and defense systems This book is intended for both academic and professional audience. It could also be used as a textbook, for a semester course at undergraduate and post graduate level in Computer Science, Information Technology, Information Security, and Information Science & Management. The book serves as basic reference volume for researchers in cloud security. It will be useful to practitioners, cloud security team, and the cloud security auditor as well. To get the most out of this book, the reader should have a working knowledge of various operating system environments, hypervisors, cloud computing fundamentals, programming languages like Python and a working knowledge of security tools.

Recent Advances in Intrusion Detection

Recent Advances in Intrusion Detection PDF Author: Robin Sommer
Publisher: Springer
ISBN: 3642236448
Category : Computers
Languages : en
Pages : 407

Get Book Here

Book Description
This book constitutes the proceedings of the 14th International Symposium on Recent Advances in Intrusion Detection, RAID 2011, held in Menlo Park, CA, USA in September 2011. The 20 papers presented were carefully reviewed and selected from 87 submissions. The papers are organized in topical sections on application security; malware; anomaly detection; Web security and social networks; and sandboxing and embedded environments.

Architecture of Computing Systems -- ARCS 2014

Architecture of Computing Systems -- ARCS 2014 PDF Author: Erik Maehle
Publisher: Springer
ISBN: 3319048910
Category : Computers
Languages : en
Pages : 260

Get Book Here

Book Description
This book constitutes the proceedings of the 27th International Conference on Architecture of Computing Systems, ARCS 2014, held in Lübeck, Germany, in February 2014. The 20 papers presented in this volume were carefully reviewed and selected from 44 submissions. They are organized in topical sections named: parallelization: applications and methods; self-organization and trust; system design; system design and sensor systems; and virtualization: I/O, memory, cloud; dependability: safety, security, and reliability aspects.